Skip to main content

Egnyte Setup

Configuring a custom Egnyte OAuth app for use with Caddi

Every firm connects Egnyte with its own OAuth application, registered in the Egnyte developer portal. This guide covers registering the app, collecting the credentials, and entering them in Caddi.

Two values to have ready before you start:

Redirect URIhttps://app.trycaddi.com/oauth-callback

Egnyte domain — the subdomain you sign in to, for example acme in https://acme.egnyte.com

Check the rate limit before you rely on this in production. Self-service Egnyte API keys are capped at 2 requests per second and 1,000 requests per day. That ceiling is read-only in the Egnyte UI, and raising it takes a conversation with Egnyte. Loops that move large document sets will hit it.

Before you start

You'll need:

  • Egnyte domain administrator privileges

  • An eligible Egnyte plan — Trial, Platform Team, and Legacy Connect domains cannot create API keys

  • Fewer than five existing API keys on the domain. Egnyte caps it at five.

  • Owner or Admin access to your Caddi organization

Egnyte can only issue API keys to domain administrators who are not signed in through a Service Account. Register the app as a real administrator; you can still authorize the connection as a service account afterwards.

Step 1: Create your developer portal account

Egnyte moved its developer portal to a new platform, so an older Egnyte developer login may not carry over automatically.

  1. Go to developers.egnyte.com and click Sign In.

  2. If you don't have an account, choose Create an account. Use the same email address as any previous Egnyte developer-portal account so your existing keys carry across.

  3. Verify your email address and sign in.

Keys issued on Egnyte's older developer portal still work — you don't need to reissue them, just sign in with the matching address.

Step 2: Register the application

The redirect URI must be HTTPS and must match https://app.trycaddi.com/oauth-callback exactly — Egnyte compares it character for character against what Caddi sends, both when the user authorizes and again when the token is issued.

  1. Click your username in the top right and choose Apps.

  2. Create a new application.

  3. Application NameCaddi

  4. Application Type — select Public Application. An Internal Application has no redirect URI field and cannot be used here.

  5. Egnyte Domain — your own domain, for example acme.egnyte.com.

  6. OAuth Redirect URI — enter https://app.trycaddi.com/oauth-callback.

  7. Accept Egnyte's terms and register the application.

Step 3: Collect the Client ID and Client Secret

Egnyte's help text notes that the client secret is not stored in its UI. Treat it as copy-now and put it straight into a password manager.

  1. Open the application you just registered.

  2. Copy the Client ID — Egnyte also labels this the API Key.

  3. Reveal and copy the Client Secret.

  4. Check the key's status. If it shows as pending, Egnyte still has it in an approval queue — wait for the approval email before connecting.

Some Egnyte domains also expose a Create API Key tile under Admin console → Apps & Integrations, which issues the same pair of credentials and usually skips the approval queue. Either route produces values that work here.

Step 4: Configure Egnyte in Caddi

This step must be completed by a Caddi organization owner or admin.

  1. In Caddi, open Integrations in the left sidebar, then click the Integration Setup tab at the top of the page. This tab is only visible to organization owners and admins.

  2. Find Egnyte in the list and click Configure.

Enter the following values:

  • Client ID — the Client ID (API Key) from your Egnyte application

  • Client Secret — the secret paired with that Client ID

  • Egnyte Domain — the domain you sign in to. Enter just the name (acme) or the full URL (https://acme.egnyte.com) — both work.

  • OAuth Scopes — leave blank to use Caddi's defaults: Egnyte.filesystem Egnyte.link Egnyte.permission Egnyte.user Egnyte.group Egnyte.bookmark. Add Egnyte.webhooks or Egnyte.audit only if a loop uses those features.

Click Save Configuration. Caddi validates the credentials immediately — if something is wrong you'll see an error right away, and nothing is stored until validation passes.

Step 5: Connect your account

  1. Go back to the My Connections tab at the top of the Integrations page.

  2. Find Egnyte and click Connect +.

  3. Sign in to Egnyte and approve the request.

  4. You'll be returned to Caddi with the connection active.

How the connection behaves

  • Each user connects their own Egnyte account. Caddi sees the folders and files that user can see, and Egnyte's audit trail attributes the activity to them.

  • A custom connection replaces the standard one. Once you save this configuration, members of your organization are disconnected from any existing Egnyte connection and will only see the option to connect through your app.

  • Access tokens last 30 days and refresh automatically, so users shouldn't be prompted to reconnect.

  • Always send explicit scopes. If no scope is specified at all, Egnyte grants global API access by default. Caddi's defaults handle this — the note matters only if you clear the field and enter your own.

  • Rate limits are the main operational constraint. Self-service keys allow 2 requests per second and 1,000 per day, shared across everyone using the connection. Contact Egnyte about a higher allowance before a document-heavy rollout.

  • Revoking access. Delete the application in the Egnyte developer portal, which immediately invalidates the credentials for everyone.

Troubleshooting

{"message":"No valid app info found for api key"}

Egnyte has no registered application matching the client ID for that domain. This is the expected error if you try to connect before completing Steps 1–3 — Caddi cannot connect to Egnyte until your firm has registered its own application and supplied the credentials. If you have already registered one, check that the Client ID in Caddi belongs to an app registered against the same Egnyte domain you entered, and that the app shows as approved rather than pending. The address bar will read https://<your-domain>.egnyte.com/puboauth/token, which tells you which domain Egnyte checked the key against.

A redirect error when connecting

Three usual causes, in order of likelihood: the app was registered as an Internal Application rather than a Public Application and therefore has no redirect URI; the URI doesn't match https://app.trycaddi.com/oauth-callback exactly; or it was entered with http instead of https.

There's no option to create an application

Your Egnyte plan is not eligible — Trial, Platform Team, and Legacy Connect domains cannot create API keys — or the domain already has five. Delete an unused key, or contact Egnyte.

The credentials are rejected and the key shows as pending

Egnyte hasn't approved the application yet. Wait for the approval email, then save the configuration again.

Loops fail intermittently with rate-limit errors

You're hitting the 2-per-second or 1,000-per-day ceiling. Reduce how often loops run, narrow the folders they scan, or ask Egnyte to raise the limit.

Caddi connects but can't see expected folders

The Egnyte user who connected doesn't have permission on those folders. Check their folder permissions in Egnyte — Caddi cannot see more than they can.

An older developer-portal login doesn't work

Egnyte migrated its developer portal. Create an account on the new portal using the same email address as the old one and your existing keys will carry across.

Still stuck? Contact Caddi support with the exact error message you're seeing and the time it occurred.

Automation ideas

Law Firms

New matter → folder structure

Caddi provisions the standard Egnyte folder tree for a new matter, applies the right permissions, and records the folder link on the matter in your practice management system.

Incoming document → filed and indexed

Caddi reads an emailed document, works out which matter it belongs to, files it to the correct Egnyte folder under your naming convention, and logs the activity.

Matter closed → archive and retention

When a matter closes, Caddi moves the folder to your archive location, applies the retention policy, and updates the matter record.

Document request → secure share link

Caddi generates the Egnyte share link for the documents a client or co-counsel has asked for, with the expiry your policy requires, and logs what was sent.

RIAs

Client onboarding → document collection

Caddi creates the client's Egnyte folder set, generates a secure upload link for the documents you need, and tracks what's still outstanding.

Quarterly reporting → distribution

Caddi files generated statements into each client's folder and creates the share links for delivery, with nothing landing in the wrong place.

Compliance request → assembled evidence pack

Caddi pulls the documents an examiner has asked for into a single reviewed pack, with a log of exactly what was included.

Did this answer your question?